Notes on security
and technology.

Guidance on the exposures we see most often, written for the people who have to act on them.

Filter:
Latest posts

Device Code Phishing: The Microsoft Login Attack That Beats MFA

Device code phishing hijacks Microsoft 365 accounts using a real sign-in page and a genuine code, with no fake website and no stolen password. Here's how it works and how to block it.

How to Recall an Email in Outlook

Sent an Outlook email by mistake? Here's how to recall it, when it actually works, and what to do when it doesn't, including the send delay most people miss.

Is Perplexity AI Safe to Use at Work?

Perplexity AI is rapidly gaining traction as a workplace research tool, but most organisations have no idea what happens to the data their employees share with it.

Is ChatGPT Safe to Use at Work?

ChatGPT is the most widely used AI tool in the workplace, but most organisations have no idea what happens to the data their employees are sharing with it.

CVE-2025-0842: Critical RCE in Windows Print Spooler, and What You Need to Do Now

A newly disclosed vulnerability in the Windows Print Spooler service allows unauthenticated remote code execution on all unpatched Windows 10/11 and Server systems. Full breakdown and immediate action checklist.

How to Set Up MFA Across Your Whole M365 Tenant in Under 30 Minutes

Step-by-step guide to enforcing multi-factor authentication across every user in your Microsoft 365 tenant, including edge cases like service accounts, shared mailboxes, and break-glass accounts.

Windows 11 BitLocker: Is Your Recovery Key Actually Safe?

Most people set up BitLocker and never think about the recovery key again, until they desperately need it. Here

Why Your Password Manager Isn't Enough (And What to Pair It With)

Password managers are one of the best things you can do for your security. But they

Windows 11 24H2 Is Here: What Actually Changed for Security?

Windows 11 24H2 landed in late 2024 with meaningful security changes underneath the surface. Here

Stop Spoofing: How to Configure DMARC, DKIM and SPF for Your M365 Domain

If someone can send email that appears to come from your domain, your business has a serious problem. SPF, DKIM, and DMARC fix that. Here